CVE-2017-0624

MEDIUM

Android Kernel 3.10/3.18 - Info Disclosure

Title source: llm

Description

An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34327795. References: QC-CR#2005832.

Exploits (1)

github WORKING POC 8 stars

by codecat007 · cpoc

https://github.com/codecat007/cvehub/tree/main/android/kernel/CVE-2017-0624

View Code ZIP pw:eip

References (2)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/98200

[Patch, Vendor Advisory] https://source.android.com/security/bulletin/2017-05-01

Scores

CVSS v3 5.5

EPSS 0.0020

EPSS Percentile 41.5%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (4)

linux/linux_kernel

linux/linux_kernel

Google Inc./Android < Kernel-3.10

Google Inc./Android < Kernel-3.18

Published May 12, 2017

Tracked Since Feb 18, 2026